That's a significant group of people for sure, but I'd add two more groups: - A group that think GDPR = cookie law and there's nothing more written in it. Neve

That's a significant group of people for sure, but I'd add two more groups: - A group that think GDPR = cookie law and there's nothing more written in it. Never any discussion about, say, forcing companies to report a data breach within 72h of detection. Or about being able to download your data, or forcing a company to remove your data, or... - A group that think passing a new law = everyone is going to comply immediately and one random website that they know of that doesn't comply but wasn't sued yet into submission = GDPR was a mistake.